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Technical Field 

5 The inventibct relates to a method and apparatus for fragile 
vfatermarkingr and in particular a method and apparatus for 
fragile wateriaarkiAg and a method for validating such a 
fragile watermark. 

10 Background 

Photographs / paintings ,r film material and other artistic 
vorks have for zaany years been recorded and transmitted 
using analogue oarriers. However « their reproduction and 
processing is time consuming, involves a heavy workload and 

15 lead to degradation of the original material. This misans 

that content produced and stored using analogue devices has 
an. in-built protection against \inintentional changes and 
malicious manipulation. In general, deliberate changes in 
analogue media ar^ not only difficult but can easily "be 

20 perceived by a human inspector. 

Recently however, digital media have become pervasive , and 
threaten to completely substitute their analogue 
counterparts- Furthermore, affordable media processing 

25 tools and fast transmission mechanisms are ubiquitous* As a 
consequence digital content can nowadays be accurately 
copied, processed and distributed around the world vrlthin 
seconds. Creators, legitimate distributors and end-users 
enjoy the flexibility and user .friendliness of digital 

30 processing, tools and netwoifks to copy, process and 

distribute their content over open digital channels at high 
speed. However, they also need to guarantee that material 
used or being published at the end of the distribution 
chain is genuine. Consequently, automatic tools to 

35 establish the authenticity and integrity of digital media 
are highly important - 



'08/08 2003 FRI 11:36 FAI 01266 811 319 Motorola ^ Mil ifumi ijyuua/uao 

CML0137 lEV/GBRI /DKB/ 1 zquierdo 




2 



Secure commutiications problems have largely found a 
solution in cryptography, which guarantees message 
integrity by using digital signatures with secret keys. 
However, traditional cryptosystems do not permanently 
5 associate cryptographic information with the content. • 

Cryptographic techniques do not embed information directly - 
into the message itself r but rather hide a message during 
communicat ion • 

10 To piTovide security by using signatures embedded directly 
in the content/ additional methods need to be considered* 
Techniques that have been proposed to address this problem 
• belong to a more general class of methods known as digital 
. watermarking if as for example zaay be found in Signal 
15 Processlngr/ Special Issue on Watermarking, vol, 66, no. 3 
May 1998 • 

Several watermarking schemes that address image 
authentication have been previously developed and fall into 
20 two basic categories: fragile and semi-fragiXe. 

Fragile watenaairking schemes address the detection of any 
image changes. Semi- fragile watermarking schemes are 
designed to discriminate between expected image changes, in 
25 most cases due to application constraints, e.g., 

compression to meet bandwidth reqcuirements, and intentional 
image tampering. 

In the case of fragile watermarking a number of scheides 
30 exist in the prior arti 

One prior scheme is proposed in S. Walton, ^'^ Information 
Authentication for a Slippery New Age'', Dr. Dobbs Journal, 
vol. 20r no. 4, Apr* I995r PP- 18-26- The schraie uses a 
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chBck-5V"n built from the 7 most sicpiificant bits of a given 
pixel/ which is then inserted as the least significant bit 
of the pixel. However ^ the watearoark has only limited 
secrurity, primarily due to the ease of calculating new 
5 check- sums. 

Another prior fragile watermarking scheme is proposed in M. 
M. Yeung and F. Mintzer, ^^An Invisible Watermarking 
Technique for Image Verification"' r Proc* ICIPr Santa 

10 Barbara., California, 1$93. The Yeung-Mintzer algorithm uses . 
a. secret key to generate a unique mapping that randoialy 
assigns a binary value to grey levels of the image. This 
mapping is used to insert a binary logo or signature in .the 
. pixel value?. Xiiaage integrity is Inspected by direct 

15 copiparison between the inserted, logo or signature and the 
decoded binary image. The main advantage of this algorithm 
is its high localization accuracy derived from the fact 
that each pixel is individually watermarked. However, the 
Yeung-Mintzer algorithm is vulnerable to simple attacks as 

20 3hown in J* Fridrich, ^^Security of Fragile Authentication 
Watermarks with localization", Proc. SpIe, vol. 4 675, Wo. 
75, Jan. 2002. 

A third prior scheme for image authentication is proposed 
25 in P. wr. Wong, ""^A Public Key Watermark for Image 

Verification and Authentication*", Proc. ICIP, Chicago, 
Illinois, Oct. 1998. This scheme embeds a digital signature 
extracted from the most significant bits of a block of the 
image into the least significant bit of the pixels in the 
30 jsame block. However this scheme was shown to be vunerable 
to a counterfeiting attack in IM* Holliman and N. Memon, 
'"Counterfeiting Attacks on Oblivious Block-Wise Independent 
Invisible Watermarking Schemes", Proc. IEEE Trans, on Image 
Processing, vol 9, no 3, Mar- 2000, pp. 432-441. This 
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attack belongs to the class o£ vector quantisation 
coupterf eiting and has b^^n shown to defeat any fragile 
watermarking scheme that achieves localization accuracy by 
watermarking small independent image blocks. 

"5 

One common feature of these and other prior schemes from 
the literature is that authentication signatures are 
eucibedded in the image content, either in the pixel or a 
transfortft domain^ and the security of the schemes resides 
10 in a hash or encryption mechanism. 

This ultimately leaves such schemes vulnerable, the attacks 
noted • above • * 

* 15 Thus there is a rteed for an alternative method of fragile 
watermarking* 

The purpose of the present invention is to address the 
above problem. 

20 

Summary of the Invention 

The present invention provides a method of fragile 
watermarking i- characterisecJ by the step of generating at 
least a first ill-conditioned operator, said ill- 
25 conditioned ope^rator being related to values extracted from 
an image or portion thereof A. 

In a first aspect, the present invention provides a method 
of fragile watermarking, as claimed in claim 1, 

30 

In a second aspect, the present invention provides a method 
of verifying a fragile watermark, as claimed in claim Id- 
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In ^ third aspect/ the present invention provides apparatus 
for fragile watermarking, as claimed in claim 23. 

In a fourth aspect, the present invention provides 
apparatus for verifying a fragile watermark, as claimed in 
claim 24. 

Further features of the present invention are as defined in 
the dependent claims. : 

Embodiments of the present invention will now be described 
by way of example vrith reference to the accompanying , 
drawingSf, in which: 

15 Brief description of the drawincrs 

FIG« 1 is a block diagram of a method of fragile 
watermarking in accordance with an embodiment of the 
present Invention. 



.10 



20 



FIG. 2 is a block diagram of a method of verifying a 
fragile watermark in accordance with an embodiment of the 
present invention. 
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Detailed desorlption 

Referring to FIGs. 1 and 2r a method of fragile 
watermarking 100 and a method of validating said fragile 
watermark 200 are disclosed. In the following description, 
5 a number of specific details are presented in order to 

provide a thorough understanding of the pireaant invention. 
. It will be obvious, however^ to a person skilled in the art 
that these specific details need not be employed to 
practice the present invention. In other instances, well 
10 known methods, procedures and components have not been 
described in detail in order to avoid unnecessarily 
obscuring the present invention. 

1. Fragile watermarking. 

15 

an embodiment of the present invention provides a method 
providing an essentially different approach from those 
reported in the prior art. This method is based on the 
inherent instability property of inverse ill-conditioned 

20 problems, and the fact that small cheuages to their input 
data cause large changes in any approximate solution. 
Singular valued decomposition and other fundamental linear 
algebra tools are used to construct an ill-conditioned 
matrix interrelating the original image and the watermark 

25 pattern. This is achieved by exploiting the relation 
between singular values^ the least square solution of 
linear algebraic equations and the high instability of 
linear ill-conditioned operators. 

30 In brief, an embodiment of the present invention performs a 
fragile watermarking method on blocks (portions) of pixels 
extracted from the image to be watermarked, the values in 
this block being treated as a matrix for the purposes of 
analysis. 
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Similarly, blocks of pixels o£ corresponding size are taken 
from a watermark pattern^ or are generated to resemble such 
blocks - 

5 

The smallest singular value of the matrix to be watermarked 
is replaced to artificially create an ill-conditioned 
minimization problem. The solution to this problem involves 
a least squares approximation o£ the previously defined 
10 ill-conditioned operator* in order to find an unknown 
parameter* 

This solution process links the watermark with the image 
using the u^iderlying ill-conditioned operator. An image 
15 block is considered watermarked by setting its smallest 
singular valu^ equal to a parameter estimated from the 
minimization task* 

Thus, the watermark is spread over the whole image in a 
20 subtle but quite complex manner. One advantage of this 

method is that the distortion induced by the watermarking 
procedure can be strictly controlled since it depends only 
on changes in the smallest singular values of each block. 

25. The verification procedure solves the same optimisation 

problem and compares the norm of the solution with a large 
secret number N used in the generation of the watermark. 

Any small change to the imag^ will therefore result in the 
30 norm of the solution differing significantly from the large 
secret number N, due to the property of the ill conditioned 
operator to produce highly differing solutions in response 
to small changes in the input values. 



m uiZDB »ii m Jiioraroia mix rmm i«i6/U38 

CML01371EV/GBRI/DRB/l2;quierdo 

8 

^the method will now be described in detail; 

Firstly, to illustrate how an ill-conditioned operator tftay 
be used to provide a watermark, consider that in many known 
5 applications of: linear algebra^ it is necessary to find a 

good approximation x of an unknown vector x e 31'* 
satisfying the linear equation 

Bx ^ h, . Bq. 1 

for a given right-hand side vector b e.. Si" - The degree of . . 
10 difficulty in solving Bq. 1 depends Upon the condition 

number of the matrix B- The vector SI = 3"**^? would seem to be 
a solution of Eq: 1, where, = (b^'bY'^B^, i.e./ denotes 
the pseudo-inverse of * 

15 How;ever^ if B is ill-oondltioned or singular then x = B*b r 
if it exist at all, is a poor approximation of x. 

An error estimate given by |x - A|| < jB^lax - jE>| shows . that 
the approximation error can grow proportional to the norm 
20 of the inverse of B.' since the norm of the inverse of B is 
proportional to the condition niimbtar of Br it is evident 
that the more the ill-conditioning of B, the larger the 
difference between x and x ^ 

25 Furthermore, the estimation of tlie inverse of an ill- 
conditioned matrix is not straightforward, and clearly is 
essentially the same problem as seen in Eq. 1, Moreover^ 
when B is ill-conditibned, solving Bq, 1 becomes equivalent 

to solving the optimisation problem l^x - bf for a 
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predefined norm ]|.| . It is veil-known in the art that the 
L2-*norm solution of this least squares problem is given by 

It becoflCtes evident from Eq. 2 that erroxs in either any of 
5 the left singular vectors of B or in the right-hand side b ' 
are drastically magnified by the smallest of the 3ingular . 
values 3s{B) of S. 

In an embodiment of the present invention^ an ill- 
10 conditioned operator B is generated that is related to 

values extracted from an image or a portion thereof A. In 
this manner alterations to A will be reflected in magnified 
errors to a solution for x of similar form to Eq. 2- 



15 In an embodiment of the present inventionr a watermarking 
pattern Q is interrelated with an image 1^ thus 
watermarking it, as follows: 

Given an image I of dimensions m x n, a watermark pattern 
20 n of typically the same dimensions is built. 

In a first embodiment, £2. is an array of pseudo- randomly 
. generated binary or real numbers . 

25 In an alternative embodiment of the present inventionr the 
procedure to generate Q uses a single or repeated instance 
of a logOy typically a binary pattern^ combined with 
pseudo-randomly generated numbers ; initially r a mosaic-like 
binary image P of dimension m x ja is built by tiling the 

30 logo to occupy an area similar to the original image J. The 
watermark pattern is then typically defined as CI ^ P ® m , 
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where m L& a m >c n array of pseudo-randomly generated 
binary nurabers and © denotes the bitwise XOR operator. 

In either erdbodiment, no assumption needs to be imposed on 
5 the statistical properties of the random number generatpr; 
the binary or real numbers used to generate the watermark 
can follow any probability distribution and are not 
restricted to Gaussian or uniform. This is because the 
present invention doest not rely on statistical analysis for 
10 authentication or tamper detection. However it will be 
clear to a person skilled in the art that in consequence 
statistical constraints can be imposed if desired. 

In eit±ier embodiment, SI depends on a secret Icey K whose 
15 value seeds the pseudo- random number generator. K is 
subsequently also used in validating the watermark* 

In an esnbodiment of the present invention, the watermarking 
process is performed in a block-wise fashion- Pox the sake 
• 20 of simplicity and without loss of generality, for the 

following description assume that an image I is partitioned 

into L siciall blocks or portions A^^\ Jr = of 
dimensions p x gr , Likewise, SI is partitioned into L blocks 
or portions W**', = 1, ... , X of dimension p « g - For the 
25 sake of notational simplicity the upper index representing 
the block nuKiber will be omitted hereon in unless expressly 
referred to» Without loss of generality for the following 
description assume that the blocks are square, i.e., 
p = g- = 

30 

Thus blocks A and W can be considered for the purpose of 
explanation to be generic matrices comprising values 
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obtained from the original image and watermarkr 
respectively. - 

As is known in the art, a fruc^damental result o£ Linear 
5 Algebra states that matrix A can be represented as 

i.e. a singular value deoomposition of A, where 

= (u^, ,v„) e Sr"" and = {v^, v„) e 9?""''. The 

columns {u^}, Jr = i, , n of % are called the left Bij>gu2ar ' 
10 xrecfcors and torm an orthononiaal basis, i.e., 

* = 1, if 1 = ;/ and • = 0 otherwise. The rows of 

are the rig-ht slngulsx: v^&ators, {vr^], = l,...,n and also 

. '«* 

form an ortbonormal basis. = d±sglSy^(A) r rS„{A)) i^ a 

diagonal matrix whose diagonal elements are the. singular 
15 values of A. If ran*"(A) » r £ n, then 

Sj^iJA) > Oj for k - l,...^rr s^iA) ^ s^^^^CA) r for Jt = 1, ...^r - 1 
and : Sjt(A) = 0, for k > Consequently Sr (A) is the smallest 
real positive singular value of A in 5^. 

20 ■ In an einbodiment of the present invention, it is proposed 
to replace S^fA) with a real positive nuniber s^{A) as part 
of the proces3 to produce a watermarked version of A, 
where the distortion introduced by the watermarking process 
' is determined with reference to -the calculation of 

25 (A ^ aJ^ » [s,(A) ^ S^iAir Eq. 4 

where denotes the l.a-'norm, and thus the distortion is 
dependent upon the value of ir^(A) • 
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Given an iniage or portion thereof A, th.e corresponding 
watermarked portion or block is defined as the matrix A p 
generated acoording to the following considerations. 
Observe that A and A have the same dimensions. 

5 

Initiallyr singular value decomposition of A and W is 
performed to obtain A = Ua^^Va ^ = ^v^w^v ^ 

respectively. Let = dLiagC^, (A) s^CA) } and 

S„ = daagtSjt(*') r • - • • s^CfiT) ) be the nonzero singular values of 
10 A and W respectively. The two diagonal matrices 

= diag(Si(A) s^(A) ) and S„ = c^iag(s:,{W) r r > 

then built by replacing the last nonzero singular values 
Sj.(A) and by two specific real positive members S^CA) 

and respectively- Here it is assumed that the 

15 sinallest nonzero singular value of A is ^^{A), i.e.^ 

ranir(A} = r and the smallest nonzero singular value of- N is 
St(ff), i.e., xanJ:(W) = t. Using §^ the watermarked block A 
is defined as 

20 Likewise, is used to build an ill-^conditioned matrix 
according to 

^ = U„i„V^ . Eq. 6 

Npw, one should choose the two values S,CA) and . 

In selecting values of SJA) and Sf,Wr it is desirable to do 
so in such a fashion as to facilitate the fragility of .the 
waterxciarking process* the uniqueness of the watermark thus 



25 
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made and optionally the control of perceptibility of the 
watermark in the final watermarked image J. 

A, Fragility. 

5 It i3 desired, that any change to single or multiple 

elements of A can be detected by a validation procedure. 

In an embodiment of the present invention, replacing s^fl?) 
with e in the calculation of Bq. € achieves this if is a 
10 sufficiently small positive real number, increasing the 
condition mainber of the singular value matrix and so 
making w extremely ill-conditioned. 1 and J? are then 
interrelated using matrix multipllication to produce the ill 
conditioned matrix B « . . ■ ' 



15 



20 



25 



Although by addressing the requirement osf fragility is 
now defined using e, A still depends on an unTcnowrn 
parameter s^{A) , For that reason B should be regarded as a 
parametric family of matrices: 

= A{M^^ . Eq. 7 

This parametric family of matrices B(4) 110 determines the 
linear ill-conditioned operator used In the fragile 
watermarking itiethod, and is resolved by addressing the 
second requirement: 

B. Uniqueness. 

It is desirable to select from amongst the parametric 
family of matrices B(s^) a single operator for use in a 
specific fragile watermark. 



30 
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For a pre-defined large real rxuixiber Nf there exists a 
unique value of s^^iA), so that the La-norm solution of the 
least squares problem 

5 ±3 , Here, h is an arbitrary vector defining the right- 
hand side of the linear system to be minimized in Eq. 8. 

Thus in an eitibodim^nt of the present invention, by 
selecting a value of as a key, a corresponding unique 
lb value 5^(A) can be found from the solution of. Eq. 8. 

' ** * • 

By using this unique valu.e ¥^(A) as S^(A) .120, a watermarked 

image block A dependent both upon key N via Bq^ 8 and key 

K via Eq. 7 is produced using A f H^Sj^vf 130 ^ with the 

15 watermark distributed over the entire block A through 
manipulation of the smallest singular value of A, 

C. Perceptibility. 

Whilst the processes described above to address the 
20 conditions of fragility and uniqueness are sufficient to 

provide a watermarked block A , in an enhanced embodiment 
of the present invention the selected value of is' 
additionally constrained to lie in the interval 
majc(epd, s^(A) — S) ^ 5^(a) ^,(A) + 5 w where eps is the machine 
25 precision and 5 is a scalar used to control the distortion 
to the image block A induced by the watermark in A . 



the esqaression maK(eps> s^{A) — S) ensures that s^lA) remains 
nonzero and positive « This condition together with Eq- 2 
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allows the distortion to be kept below a user-defined value 
S . 

In an embodiment of the present invention, the method of 
5 fragile watermarking of an image I comprises the following 
steps : 

i. Generating a JC-dependent watermark pattern matrix W 
from £2^ or recalling a pre-existing one; 
10 ii. Constructing 110 the parametric family of matrices 

jB(S^) as defined by Eq. 7. 
iii. Estimating 120 the unique parameter s^lA), that 
minimizes the expression: 



mxn 

Eq. 9 



15 {based on Eq. 2) where is the 1-tA column of. the 

matriaL formed with the right singular vectors of 
Bf j5ji(B)are the singular values o£ £>'Lb the right- 
hand side vector given in Eq* B and key W is a 
large real number. 

20 iv. Estimating 130 the watermarked block A = U^S^V^hy 
setting § = diag{s^(A) ^ ^Sr-iCA), ^<A)>^ 

In an otherwise similar enhanced embodiment of the present 
inventlonr step iii» above comprises estimating the unique 
25 parameter s^{A). e [max (ep^r ^ffrW) - r s^iA) -h S] ^ IH^, H,], that 
minimises the expression: 



Eq. 10 




10 
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Irx both the directly preceding embodixnents, step iv. shows 
how the value S^CA) in Eq* 5 is chosen, namely by setting 
Sp(A) = s'jA), where Wj,{A) is the result of the minimization 
problem of £q* 9 or 10. Like K, the number J/ in Eq. 9 or 10 
is also secret. Although it is possible to select a value 
of N dependant on K or vice-versa, higher security is 
achieved when N and JSC are chosen independently. Thus, the 
security of the proposed approach resides in the secrecy of 
set of keys ic = {jC, ly} , 

In an enhanced embodiment of the present invention^ the 
value of Jb selected for equations 8^ 9 or 10 is made 
dependant upon a parameter derived from' a portion of Imaqe 
r other than current portion A: 

15 

Por a sequential watermarking process comprising the 
watermarking of portion A^^^ after the watermarking of 
portion for Jf=l,„iJD Of i portions of image X, then 

the step of calculating i>'*^ for portion' A^^^ comprises 
20 calculating substantially the following equation part: 

f A^^'^Z^^ £or ;c = 1 

= \a'-^« .is. ■ 

where Z^^^ i© a pseudo-random binary vector . 

This enhancement increases the difficulty of successfully 
25 undertaking, a vector quantisation attack upon the image J, 
requiring that larger image areas containing several 
au-fihentlcated blocks are replaced. Even then, -the blocks at 
the border of the swapped area will be declared faked: 



30 



2- Validating a fragile watermark- 
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To validate authenticity and to detect tampered areas, a 
receiver of a received image I' needs to test if the 

received image or a portion thereof A* has been tampered 
with or not. It is assumed that the receiver is a trusted 
5 party who knows the secret set of k^ys ^ - n}. 

In an embodiment of the present invention, in addition to e 
a tolerance value r is used in the verification process. 
This parameter provides tolerance to approximation errors 
10 inherent to any numerical process, e and t are fixed 

numbers and so can be known to the public. Referring to 
FIG* 2r most steps of the verification procedure coincide 
with the steps of the watermarking procedure: 

15 Using K, the receiver first generates the watermark pattern 
or portion thereof. Next, ^ is used to build the matrix 

I? by setting = cii^g(«?^(W) , , , , ^ , ^) as in Eq. 6, 

Afterwards, the ill-conditioned matrix B* = is built 

210 and the solution of the minimization problem 

is calculated 220. Onoe Bq. 12 has been solved is 
defined as the square root of the norm of the vector x 
minimizing Eq. 12* 

25 The verification step consists of a comparison between 2f* 
and the secret value Ar 230. A Boolean response is obtained 

by thresholding the absolute difference |w* - Afj = , If 
r ^ r , A* is authentic 232, otherwise A* is declared a 
fake 234, as it is judged that modifications to A* have 
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altered the ill-conditioned matrix B* = such that the 

error in solution JftT* to expected solution N exceeds 
tolerance threshold r - 

,5 It will be clear to a person skilled in the art that whilst 
Sj,CA) and S^iff) are the preferred singular values to be 
replaced, an eiflbodiment of the present invention may 
replace a singular value other than s^(A) or although 
for this is likely to increase distortion in the 

10 watermarked block A . 

It will also be clear to a person skilled in the art that- 
tractable linear and non-linear problems other than the 
minimisation problem of Eg. S and 12 that involve an ill- 
15 conditioned operator toay be amenable to the methods 
described herein- • 
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3. Supplementary infonoation 

For the purposes of clarity, the following provides 
detailed proofs of the ability to" find an ill-conditioned 
5 operator B for a given A, and the ability to find a value 
■^W) € IHq, ifiJ . It also provides a discussion of the 
possible values of key AT. 

To prove the ill-conditioning of let A and « be two 
10 square matrices of the same dimension and s^Cfl)* s,,{W) their 
k-th singular values, respectively- Than, 

fii+j_,(AW) S Si{A)3jm, for all integers ±, [For the proof 
Of this resultr see A. Pietsch^ JSigejivaiue^ anrf s-Miimbers, 
Cambridge University Press, 1997, Propoiaition 2.3.12.) 
15 * 

Next, let the smallest singular values of B=AS7 and W be 
s^(B) and s^m, respectively. Then 

s^{B) & S,.t+i(A) • a^iW) « S • s,^^^,(A) for i&r. Eq. 13 

This follows directly from the previous result fay setting 
20 l^r-t-hl and j-t. 

Since s is chosen to be very small, the inequality Eq. 13 
guarantees that the smallest singular value of B is also 
tiny and therefore extremely ill-conditioned. 

25 

Usually, the inatricee A and W have full rank, i.e., t = r. 
However/ it is possible to build counterexaniples with 
t > r . Even in such unusual situations Eq. 13 can be 
applied by setting Sj,(m = 0 f oir all Jr > r . Observe that 
30 • because J?" is artificially constructed, there is nothing to 
prevents the required values being set to zero. As a 
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consequence the condition t :S r in Eq. 13 can be assumed in 
any case. 

In order to prove the existence of Sj.iA) e [Ho* Sil' 
5 minimizing the expression Eq* 10 for a fixed value 

consider the real valued functions Hz) : [B^, 91* , and 

g(z) I [Ho, HJ SH* defined as Uiz) « sJB) and 

2i(z) can be written as I^z) = s^lA{zW) = (h^ * hj) (z) , with 
10 ii(z) = s,(B(z) ) and Jjs,.(z) = JHz)i$ . The two functions and Jij 
are continuous in the interval tHo» ^I'i- Hence, Hz) is al&o 
continuous in tHo» • The continuity of Uz) can now be 
used to prove that g{z) is continuous in - Using Eq. 

2 it is straightforward to derive the following expressioni 

ThuS/ is the sum of quotients of continuous functions. 

Therefore, gt^> is also continuous in [H^, flil - 

Now, consider h max = max Cg<^) 1 and h xnin = min Iglz) ) - If 
20 We l^iimax) ,gUamin)] then it exists z e [H^, ifj such that 

y(3D » This follows from the continuity of g{z) in [Ha^ ffil 
and the mean-value theorem of continuous functions. 

The above considerations illustrate the effectiveness and 
25 feasibility of the proposed invention. The underlying 

operator of Eq. 8 can be made extremely ill-conditioned 
while the norm of its solution is kept equal to JW* 
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Furthermore, by eelscting s,(a) s the dl^tprtion on 

the original image remains below the Input parameter S « 

However, this last- property constrains the rariaticn of 
5 3^(A) to a very small interval * Since s^(A) depends on an 
in^ortant question arise:& of how the small interval [Hoi ffil 
constrains the set of feasible values 

Since N is. a secret key it is desirable tbat it is 
10 extremely difficult to estimated Obviously the smaller the 
set of feasible values for N, the easier it is to estimate 
N and so mount a successful attack. This concern is , . 
addressed below. 

• 15 Fortunately / the range of values that can be used for N is 
large, making difficult for an attacker to estimate it. 
Since the distortion introduced by the watermark can be 
strictly controlled by the distortion coefficient this 
coefficient defines the feasibility interval [Hq, H^], 

20 Clearly, this interval is very small. Its maxJLmum length 
does not exceed 2ff and according to tbia considerations 
above it defines the range of permissible values for 
N e |(gr(2imax) ,g<ft loin)] . Since N should be a large number to 
improve the security of the proposed algorithm^ it is also 

25 important to show that the interval of permissible values 
of N is also very large. Variations of ? € [ff^^ H^l are 
reflected in the variations of the smallest singular value 
of B. According to Eq. 13 the smallest singular value of B 
is very close to ^ . This fact can be used to find an 

30 estimate for the interval \gih max) ^ gib min)] ♦ For this we 

consider the hyperbola plz) « C + D / with C = ^ \^i>/sj,[B)] 



- 08/08 2003 FRI 11:40 FAX 01256 811 319 Motorola BRIT PAOTr 



CML01371£V/GBRl/t)RE/Izquierdo 




22 



and D = (ul^bf . Since tJfci^- variation of z e VS^, H^l determines 
the variatipzx of p(z}r this gives the range for possible 
values Observe that changes in z also affect C and Dr 
but actually the smallest singular value of B is the 
5 leading term determining the behaviour of p(z) Clearly, 

p{z) — > oo ;ijf ^ — ► 0 . Furthermore r p maps tiny intervals very 
close- to zero into very large intervals- For instance, if 
s = 10"" and S w 10"^, then z will approximately vary 
between the machine precision eps, ^*<s^ r ^0'^^ r and 10"^. In 
10 this case |^(h max) / gr(h min)] « [10^, 10^^]* "As a consequence, 
for this particular example N could be selected from the 
interval N € lO^^I. These arguments show that the rang© 

of permissible values of fir is hugs and it would be 
extremely hard for an attacker to estimate 
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Claixas 

!♦ A method of fragile watermarking, characterised by the 
step of generating at least a flrat ill-conditioned 
5 operator, said ill-'conditioned operator being related to 
values extracted from an image or portion thereof A- 

2, A method of fragile watermarking according to claim 1, 
comprising the step of replacing a non-zero singular value 
10 of a singular value matrix of an image or portion 

thereof A, with a solution to a linear equation comprising 
the ill-conditioned operator* 

3> A method of fragile watenaarking according to cla.i3a 2f 
15 wherein the non-zexo singular value to be replaced is the 
smallest non-zero singular value Sr(A) in a singular value 
matrix Sa of rank r, 

4. A method of fragile watermarking according to any one 
20 of the preceding claims ji wherein a non-zero singular value 
of a singular value matrix Sw of a watermark pattern or 
portion thereof W is replaced^ such that said replacemen-t 
increases the condition number of the singular value xoatrla: 
of the watermark pattern or portion thereof 

25 

5* A method of fragile watermarking according to claiai 4, 
wherein the non-zero singular value to be replaced is the 
smallest non-zero singular value St (Wf) in a singular value . 
laatrix 5» of rank t. 

30 

6- A method of fragile watermarking according to any one 
of the preceding claims, wherein the step of calculating a 
replacement non-zero singular value of singular value 
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itiatrix Svr of a watermark or portion thereof W comprises 
calculating substantially the following equation part: 

with all terms as defined herein. 

5 

7 . A method of fragile watenriarking according to any one 
of the preceding claiiaS/ wherein the step of generating at 
least a first ill-conditioned operator "comprises 
calculating substantially the following equation part: 

10 B ^ M r 

where 5? is substantially constructed according to 

W - U^S^V^ f comprising at least one * altered singular 
value SfcCFf) = s , and such* that B forms a parametric family 
o£ matrices = MB^)^ for possible values- of sJA), with 

15 all . remaining terms as defined herein* 

a. A method of fragile watermarking according to claim* 
13, wherein s^iA) is determined by an Lg-norm solution of 

mxn - ^ \^ * 

the least sG[uares problem ^ ^ gjp IP^ "^^ equal the 

20 square of a predefined key N of predetermined value, with 
all terms as defined herein. 

9. & method of fragile watermarking according to any one 
of the preceding claims ^ wherein the step of calculating 
25 the replacement non-zero singular value of singular value 
matrix A comprises calculating substantially the following 
equation part: 

mln 



with all terms as defined herein 
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10- A method of fragile, watermarking according to claim 9, 
wherein §^{A) further satisfies 

« e [masfi (eps, ~ ^ , ^^(A) + ] = ISTor Hil , ©uoh that 

the 9tep of calculating the replacement non-zero singular 
5 value comprises calculating substantially the following 
equation part: 

with all terras as defined herein* 

.10 11. A method of fragile watermarking according to any one 
of. cl^im^i 8 to 10/ wherein vector b is related to at. least 
a first parameter derived from a portion of an image I 
other than A. 

15 12 • A method of fragile watermarking according to claim 
11, wherein fox a sequential watermarking process 
comprising the watermarking of portion A**"^ after the 
watermarking of portion A^'""^^ k=l, of L ptfjrtions, then 

the step of calculating b^*^' for portion A^''^ comprises 

20 calculating substantially the following equation part: 

lA'^'z'^' for k ^1 
^ |a<*-»^**> • else' 

where Z^^^ is a pseudo- random binary vector. 

13- A method of fragile watermarking according to any one 
25 of the preceding claims/ wherein the step of calculating 
the watermarked image or portion thereof A comprises 
calculating substantially the following equation part: 

where comprises at least one replaced singular value, 
30 with all remaining terms as defined herein. 



08/08Jil)03 FRI 11:41 M 01Z58 811 318 Moma MIT mm 



CMLO 137 lEV/ GBRI /DRE/ laquiercio 



26 



10 



15 



20 



14. A method of fragile va-atennarking according to any one 
of the preceding claims, wherein a watermark pattern or 
portion thereof is generated by a pseudo-random generator 
seeded by a key K of predetermined value. 

15. A method of fragile watermarking according to claim 
14, wherein the values of key K and key- W are related* 

16. A method of fragile watermarking according to either 
one of claims 14 and 15/ wherein the a watermark pattern or 
portion thereof W is generated by a pseudo-random generator 
seeded by a key K of predetermined value, combined with 
either a single or repeated instance of a logo. 

17 • A method of fragile watermarking according to any one 
of the preceding claims, comprising the following steps; 
i. generating a JC-dependent watermark pattern W from 

£2, or recalling a pre-existing one; 
li. constructing a parametric family of matrices B{Bj,)? 
iii. estimating a "anique parameter 5p(A), that niinimizes 
the expression 



iv. estimating the watermarked block A = Uj^S^y^ hy 

setting S = dl^gl&^lA) , ,9^_i{A), ^(A)), 

with all terms as defined herein- 

18* A method of fragile watermarking according to any one 
of claims 1 to 16, comprising the following steps; 

i. generating a JC-dependent watermark pattern W from 




30 . 



n, or recalling a pre-existing one; 
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ii. constructing a parametric family of matrices S(s,); 

iii. estimating a unique parameter 

sjJH s [niax(ep«:, - , sJAH + ^] = [H^. H^l, that 
minimizes the expression: 



min. 
S, e fir. 



iv.* estimatiiig the watermarkeci block A = Ua^a^a'^V 

setting S == diag(i%(A) , , ^r-it A) > ' 

with all terms as defined herein. 

10 . 19. A method of verifying a fragile watermark^ 

characterised by the step; of generating at least a first 
ill-conditioned operator^ said ill-conditioned operator 
being related to values extracted from a received image or 
portion thereof A*» 

15 

20* A method of verifying a fragile waterniark according to 
claim 19^ characterised by the step of calculating a 

solution to the least squares problem ^^^^p - where 
B* = A*N r with all terms as defined herein* 

2D 

21* A nethod of verifying a fragile watermark according to 
either one of claims 19 and 20, wherein a positive square- 
root N* of the Ii2-norm solution of th<& least squares 

problem ^"^^p 1^**^ Hll ^® compared with key Nj and 

25 the received image or portion thereof A* comprising 

the fragile watermark is declared authentic if |w* - iv[ ^ r , 
where r is a threshold value. 
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22. A method of verifying a fragile watermark according to 
any on© of claims 19 to 21/ wherein the step of calculating 

value comprises calculating substantially the following 
5 equation part: 

with all terms as defined herein; 

N* is compared with key -and 

the received image or portion thereof A* comprising . 
10 the fragile watermark is declared authentic if - Jtf | :S r , 
where t ±& a threshold v^iue* 

23. Apparatus for fragile watermarking of an image in 
accordance with a method. of any one of claims 1 to 18,r and 

15 comprising; 

generating means fo^ generating at least a first ill- 
conditioned operator, said ill-conditioned operator being 
related to values extracted from an image or portion 
thereof A, . 

20 

24. Apparatus for validating a fragile watermarked image 
in accordance with a method of any one of claims 19 to 22 ^ 
and comprising; 

generating means for generating at least a first ill- 
25 conditioned operator, said ill-conditioned operator being 
related to values extracted from a received image or 
portion thereof A* - 

25. A method of fragile, watermarking according to claim 1 
30 and substantially as hereinbefore described with reference 

to the accompanying drawings . 
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25* A method pf verifying a fragile watermark according to 
claim 19 and substantially as hereinbefore described with, 
reference to the accompanying drawings . 
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Abstract 

Method and Apparatus for Fragile Watermarking 

5 A method of fragile watenaarldng is characterised by the 
step of generating at least a first ill-conditioned 
operator, said ill-cQnditioned operator being related to 
values extracted from an image or portion thereof A. 



10 FIG. 1 



*08/08 2003 FRI 11:42 FAX 01256 811 319 Motorola BRIT PATENT 



CML01371EV/GBRI/DRE/Iz;c3uierdo 



1/1 



110 




120 



130 



Construct 




Estimate 


^ 


Insert Watermark 


^ 













200 



Figure 1 



210 



Construct 
X 




220 



idxn II . 
N*= B X - ^„ 




200 



232 



234 



-Figure 2 



This Page is Inserted by IFW Indexing and Scanning 
Operations and is not part of the Official Record 



BEST AVAILABLE IMAGES 



Defective images within this document are accurate representations of tiie original 
documents submitted by the applicant. 

Defects in the images include but are not limited to the items checked: 



M BLACK BORDERS 

□ IMAGE CUT OFF AT TOP, BOTTOM OR SIDES 

□ FADED TEXT OR DRAWING 

□ BLURRED OR ILLEGIBLE TEXT OR DRAWING 

□ SKEWED/SLANTED IMAGES 

□ COLOR OR BLACK AND WHITE PHOTOGRAPHS 

□ GRAY SCALE DOCUMENTS 



□ LINES OR MARKS ON ORIGINAL DOCUMENT 

□ REFERENCE(S) OR EXHIBIT(S) SUBMITTED ARE POOR QUALITY 

□ OTHER: 



IMAGES ARE BEST AVAILABLE COPY. 
As rescanning these documents wiU not correct the image 
problems checked, please do not report these problems to 
the IFW Image Problem Mailbox. 




